Manakoto privacy policy
Updated October 3, 2026.
Manakoto helps you learn Japanese. You can study as a guest without creating an account.
Learning on your device
Preferences, checked answers, practice sessions, and writing completions are stored in your browser. Downloaded app files support offline learning. Clearing browser storage can remove this data. You can export a backup in Settings.
Optional accounts and cloud sync
If you create an account, we store your email address, display name, authentication identity, and synced learning progress. Email passwords are stored as hashes. Google sign-in provides your account identity, email, and profile name; we do not receive your Google password. Account services use Manakoto’s server and PostgreSQL database.
Resend processes your email address and transactional messages for registration confirmation and password reset. We do not send marketing emails. Email links contain temporary, single-use tokens.
Subscriptions
Google Play handles Android payments. Our server verifies purchase tokens and stores subscription status to determine Premium access. We do not receive your card details. Subscription cancellation is managed through Google Play. When web payments are enabled, Duitku receives the account email/name and order information to process hosted checkout. Web Premium periods are prepaid and do not renew automatically.
Cookies and security
We use essential cookies for signed-in web sessions and Google sign-in. Rate limiting uses hashed network identifiers and account identifiers. These support security and email limits, not advertising. Hashed rate-limit records expire after 62 days without an update. Some security buckets use internal account IDs rather than hashes. Purchase notification deduplication IDs and processing timestamps also expire after 62 days. Consumed refresh-token hashes are retained until the session expires or is revoked. We do not include advertising or analytics trackers.
Pronunciation
Pronunciation uses your device or browser’s speech service. Availability and network requirements depend on its installed voices and provider. Manakoto does not record your voice.
Account deletion and retention
Request deletion in Account or on the Manakoto account deletion page after signing in recently. You do not need to reinstall the app. Your account is disabled immediately and all sessions, email tokens, and account email jobs are removed. Login and sync are blocked. After 30 days, automated processing permanently removes your email, name, password hash, Google identity, cloud progress/preferences, and Manakoto-held purchase tokens and web orders. This is a processing period, not a claim of legally required retention.
A minimal processing receipt is kept for 365 days from the request, then removed. It contains a random request number and request/purge timestamps; the account association is removed upon erasure. It does not copy your email, name, passwords, or learning data. This is operational audit retention, not a stated statutory requirement. Payment providers retain their own records according to their policies.
Server backup copies expire within 30 additional days after permanent erasure and are not used to reactivate deleted accounts. The deployment includes backup rotation; the operator must apply this limit to every offsite copy as well. Local account data in the requesting browser is cleared. Clear offline copies on other devices, guest data, and exported backups separately. Deleting an account does not cancel a Google Play subscription. Ordinary email job records are removed after 30 days.
A separate recovery journal prevents database restores from reactivating deleted accounts. It contains the internal account ID, request ID and deletion/retention timestamps, without email, name or learning data. It remains until 30 days after permanent erasure so it covers the permitted backup lifetime, then is removed. The 365-day receipt is separate and loses its account link after erasure.
Children and purchases
Children should ask a parent or guardian before creating an account or making a purchase. All core learning content remains available without purchasing Premium.
Contact
Contact the developer through the support contact listed on Manakoto’s Google Play listing. The deployment owner must keep that contact current.